education learning

news media journalism

documentation technical

technology software

government public service

English

__Host-JSESSIONID

AvendooLocale

Domain 'lernwelt.haufe-akademie.de' uses the German country-code top-level domain (.de), featuring subdomain 'lernwelt'. The registrable portion 'haufe-akademie' spans 14 characters containing 8 vowels alongside five consonants, notching one hyphen. Word splitting yields 3 words: hau, fe, akademie. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

username

password

hiddenusrnme

html/57/82/57829bf4-e531-47ed-865d-55e39eb2d0c3.html.gz

inline; filename="Login Hintergrund elevate.jpg";

inline; filename="haufe-akademie-rgb-logo-main.svg";

inline; filename="TWKHaufeAkademieEverett-Bold.woff2";

inline; filename="TWKHaufeAkademieEverett-Regular.woff2";

attachment; filename="haufe-akademie-rgb-symbol-square-main.png";

34c5b7b058640503224a11acd9e5edd7a3d11d6dd1a1d05e9cb971855e798849

a49a94f0f1bca3561a3ea6d29b9e0ddaaf049ba8c3654d5c9800078426524430

7f66d0ef758c763d0a6f00c5e0ee1c6f3ac0bc873635ef4c4ff2d38f55043f12

3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24

9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd

5b1f2398fb2d9790598737d62639df93ad860406289e305bcb9332f82d792431

2c301bf4c7e037ea9b90a8388532b841f909a8b5a02b811169c68dfa9c4f4148

Need some help? You can find the FAQ page here.

width=device-width, minimum-scale=1, maximum-scale=1

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

haufe-akademie.de

noris network netmaster

Sebastian Wiesinger

Ingo Kraupa

Jan Dirnberger

NORIS-MNT

HAUFE-LEXWARE-PROD-AVD-FE-EXT-NET


	$(document).ready(function() {

	customPwaInstall();

	$("#username").focus();

	$(".loginInput[required]").on("input", function() {
		if ($(this).val().trim() == "") {
			$(this).parents(".loginRow").addClass("error");
		} else {
			$(this).parents(".loginRow").removeClass("error");
		}
	});

	$("#password").on("input", function() {
		$(".passwordRow").removeClass("error");
		$('#licenseError').hide();
		if ($(this).val().trim() == "" || $("#loginButtonPasswordNext").attr("locked") === "locked") {
			$("#loginButtonPasswordNext").attr("disabled", "disabled");
			$('#inputValidationError').hide();
		} else {
			$("#loginButtonPasswordNext").removeAttr("disabled");
			$('#inputValidationError').show();
		}
	});

	$(".loginInput[required]").on("input", function() {
		$(this).removeClass("error");
		let allReqFilled = true;
		$("#loginBoxNewPassword .loginInput[required]").each(function(){
			if ($(this).val().trim() === "") {
				allReqFilled = false;	
			}
		});
		if (allReqFilled) {
			$("#loginButtonGetNewPassword").removeAttr("disabled");
		} else {
			$("#loginButtonGetNewPassword").attr("disabled", "disabled");
		}
	});

	$(document).on('submit', '#usernameForm', function(e) {
		$("#username").attr("disabled", "disabled");
		e.preventDefault();
		$("#loginButtonUsernameNext").addClass("loading");
		$("#hiddenUsername").val($("#username").val());
		$("#password").val("");
		$("#hiddenPassword").val("");
		$(".passwordRow").removeClass("error");
		$(".loginRow").removeClass("error");
		$('#licenseError').hide();
		$('#inputValidationError').show();
		if ($("#hiddenPassword").val() != "" && $("#loginButtonPasswordNext").attr("locked") !== "locked") {
			$("#loginButtonPasswordNext").removeAttr("disabled");
		}

		validateUserName();
	});

	$("#loginButtonPasswordBack").click(function(e) {
		$("#username").removeAttr("disabled");
		$('#inputValidationError').hide();
		$('#inputValidationErrorExpired').hide();
		$('#inputValidationErrorNotActive').hide();
		$('#licenseError').hide();
		e.preventDefault();
		$("#username").val($("#hiddenUsername ").val());
		$("#hiddenPassword").val($("#password").val());
		$("#loginBoxPassword").fadeOut(250).removeClass("active").addClass("fadeOutRight");
		setTimeout(function() {
			$("#loginBoxUsername").fadeIn(250).removeClass("fadeOutLeft fadeOutRight").addClass("active");
			$("#username").focus();
		}, 250);
	});

	$(document).on('submit', '#passwordForm', function(e) {
		e.preventDefault();
		$("#loginButtonPasswordNext").addClass("loading");
		$('#loginButtonPasswordNext').attr('disabled', 'disabled');

		loginUser();
	});

	$("#loginRegisterLink").click(function(e) {
		e.preventDefault();
		register();
	});

	$(".loginForgotPasswordLink").click(function(e) {
		e.preventDefault();
		$("#newPasswordUsername").val($("#username").val());
		if ($("#newPasswordUsername").val() != "") {
			$("#loginButtonGetNewPassword").removeAttr("disabled");
		}
		$("#loginBoxUsername").fadeOut(250).removeClass("active").addClass("fadeOutLeft");
		$("#loginBoxPassword").fadeOut(250).removeClass("active").addClass("fadeOutLeft");
		setTimeout(function() {
			$("#loginBoxNewPassword").fadeIn(250).removeClass("fadeOutLeft fadeOutRight").addClass("active");
			$(".loading").removeClass("loading");
			$("#newPasswordUsername").focus();
		}, 250);
	});

	$("#loginButtonNewPasswordBack").click(function(e) {
        $("#username").removeAttr("disabled");
		e.preventDefault();
		$("#loginBoxNewPassword").fadeOut(250).removeClass("active").addClass("fadeOutRight");
		setTimeout(function() {
			$("#loginBoxUsername").fadeIn(250).removeClass("fadeOutLeft fadeOutRight").addClass("active");
			$("#username").focus();
		}, 250);
	});

	$(document).on('submit', '#newPasswordForm', function(e) {
		e.preventDefault();
		$("#loginButtonGetNewPassword").addClass("loading");
		
		forgotPassword();
	});

	$("#loginButtonReload").click(function(e) {
		window.location.reload();
	});






	$(".loginLanguage").click(function() {
		$(this).toggleClass("active");
		$(this).siblings(".languageDropdown").toggleClass("active");
	});





});

function validateUserName() {
	post('../ui/login/validateUserName', { login: $('#username').val() })
		.then(loginResponse => {
			if (loginResponse.sso && loginResponse.valid) {
				doSso(loginResponse);
			} else {
				showPasswordCard();
				
				if (loginResponse.locked) {
					lockLogin(loginResponse);
				} else {
					unlockLogin();
				}
			}
		})
		.catch((error) => {
			console.error('Error in post:', error);
			$(".loading").removeClass("loading");
		});
}

function loginUser() {
	post('../ui/login/loginUser', { login: $('#username').val(), password: $('#password').val() })
		.then(loginResponse => {
			$(".loading").removeClass("loading");
			
			if (!loginResponse.valid) {
				$('#loginButtonPasswordNext').removeAttr('disabled');
				$(".passwordRow").addClass("error");
				
				$("#hiddenPassword").val("");
				$("#password").val("");
				
				if (loginResponse.userExpired) {
					disableLogin();
					$('#inputValidationErrorExpired').show();
					$('#inputValidationError').hide();
				} else if (loginResponse.locked) {
					lockLogin(loginResponse);
				}
				
				if (loginResponse.userNotActive) {
					disableLogin();
					$('#inputValidationErrorNotActive').show();
					$('#inputValidationError').hide();
				} else if (loginResponse.locked) {
					lockLogin(loginResponse);
				}
				
				if (loginResponse.licenseOverrun) {
					disableLogin();
					$('#licenseError').show();
					$('#inputValidationError').hide();
				} else if (loginResponse.locked) {
					lockLogin(loginResponse);
				}
				
			} else {
				window.location.href = loginResponse.view;
			}
		})
		.catch((error) => {
			console.error('Error in post:', error);
			$(".loading").removeClass("loading");
		});
}

function lockLogin(loginResponse) {
	disableLogin();
	showLockMessage(loginResponse.lockedTime);
}

function unlockLogin() {
	enableLogin();
	hideLockMessage();
}

function hideLockMessage() {
	$('#lockTime').text("");
	$('#lockedInfoBox').hide();
}

function showLockMessage(lockedTime) {
	$('#lockTime').text(lockedTime);
	$('#lockedInfoBox').show();
}

function disableLogin() {
	$('#loginButtonPasswordNext').attr('disabled', 'disabled');
	$('#loginButtonPasswordNext').attr('locked', 'locked');
}

function enableLogin() {
	$('#loginButtonPasswordNext').removeAttr('disabled');
	$('#loginButtonPasswordNext').removeAttr('locked');
}

function forgotPassword() {
	post('../ui/login/forgotPassword', { 
			login: $('#newPasswordUsername').val(),
			phoneNumber: $('#newPasswordPhoneNumber').val(),
			comment: $('#newPasswordComment').val()
			})
		.then(loginResponse => {
			$("#loginBoxNewPassword").fadeOut(250).removeClass("active").addClass("fadeOutLeft");
			setTimeout(function() {
				$("#loginBoxNewPasswordFeedback").fadeIn(250).removeClass("fadeOutLeft fadeOutRight").addClass("active");
			}, 350);
			
			if (loginResponse.valid) {
				$('#newPasswordSuccess').show();
				$('#newPasswordError').hide();
			} else {
				$('#newPasswordError').show();
				$('#newPasswordSuccess').hide();
			}
		})
}

function changeLanguage(lang) {
	var data = new URLSearchParams();
	data.append('siteLanguage', lang);
	
	postLang('../ui/login', data.toString(), 'follow', { 'Content-Type': 'application/x-www-form-urlencoded' });
}

function buildFormEncoded(json) {
	return new URLSearchParams(json);
}

function register() {
	get('../ui/login/register')
		.then(loginResponse => {
			window.location.href = loginResponse.view;
		})
}

async function post(url, data, headers = { 'Content-Type': 'application/json' }) {
	headers['X-XSRF-TOKEN'] = getAvendooToken()
	const response = await fetch(url, { method: 'POST', headers: headers, body: (headers["Content-Type"] === 'application/json' ? JSON.stringify(data) : data) })
		.catch((error) => {
			console.error('Error in post:', error);
			return JSON.parse("");
		});

	return response.json();
}

async function postLang(url, data, redirect, headers = { 'Content-Type': 'application/json' }) {
	headers['X-XSRF-TOKEN'] = getAvendooToken()
	await fetch(url, { method: 'POST', headers: headers, body: (headers["Content-Type"] === 'application/json' ? JSON.stringify(data) : data), redirect: redirect })
		.then(response => {
			window.location.href = response.url;
		})
		.catch((error) => {
			console.error('Error in post:', error);
		});
}

async function get(url) {
	const response = await fetch(url)
		.catch((error) => {
			console.error('Error in post:', error);
			return JSON.parse("");
		});

	return response.json();
}

function doSso(loginResponse) {
	window.location.href = '../ui/login/sso?sso=' + loginResponse.idpId;
}

function showPasswordCard() {
	$("#loginBoxUsername").fadeOut(250).removeClass("active").addClass("fadeOutLeft");
	$(".loginUsername").text($("#username").val());
	setTimeout(function() {
		$("#loginBoxPassword").fadeIn(250).removeClass("fadeOutLeft fadeOutRight").addClass("active");
		$(".loading").removeClass("loading");
		$("#password").focus();
	}, 250);
}

function customPwaInstall() {
	fetch('../ui/pwa-valid')
		.then(response => response.json())
		.then(pwaAllowed => {
			if (!pwaAllowed) {
				return;
			}

			pwaInstall();
		})
		.catch((error) => {
			console.error('Error validating if pwa allowed:', error);
		});
}

function pwaInstall() {
	let deferredPrompt;

	window.addEventListener('beforeinstallprompt', (e) => {
		e.preventDefault();
		deferredPrompt = e;
		$('#loginInfoboxPwa').show();
		$('#loginInfoboxPwa').removeAttr("disabled");
	});

	$('#loginInfoboxPwa').click((e) => {
		$('#loginInfoboxPwa').attr("disabled", "disabled");
		$('#loginInfoboxPwa').hide();

		deferredPrompt.prompt();
		deferredPrompt.userChoice.then((choiceResult) => {
			if (choiceResult.outcome === 'accepted') {
				console.log('User accepted the install prompt');
			} else {
				console.log('User dismissed the install prompt');
			}
		});
	});

}

function detectMob() {
	const toMatch = [
		/Android/i,
		/webOS/i,
		/iPhone/i,
		/iPad/i,
		/iPod/i,
		/BlackBerry/i,
		/Windows Phone/i
	];

	return toMatch.some((toMatchItem) => {
		return navigator.userAgent.match(toMatchItem);
	});
}

function getAvendooToken() {
	return getCookie('XSRF-TOKEN');
}

function getCookie(cname) {
	let name = cname + "=";
	let decodedCookie = decodeURIComponent(document.cookie);
	let ca = decodedCookie.split(';');
	for (let i = 0; i < ca.length; i++) {
		let c = ca[i];
		while (c.charAt(0) == ' ') {
			c = c.substring(1);
		}
		if (c.indexOf(name) == 0) {
			return c.substring(name.length, c.length);
		}
	}
	return "";
}


Requests	IP Address	Location	AS Autonomous System
25	213.95.198.25	Üchtelhausen, Bavaria, Germany	AS12337noris network AG
25	1	-	-

Security Scan Report: lernwelt.haufe-akademie.de

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History